kokuwaio/kyverno

By kokuwaio

•Updated 3 days ago

A WoodpeckerCI plugin to run kyverno and kubectl to lint kubernetes manifests.

Image

Integration & delivery

Developer tools

8.1K

Overview Tags

kokuwaio/kyverno repository overview

⁠Kyverno WoodpeckerCI Plugin

A WoodpeckerCI⁠ plugin for kyverno⁠ and kustomize⁠ to lint kubernetes manifests. Also usable with Gitlab, Github or locally, see examples for usage.

⁠Features

runs kustomize if entrypoint.sh is found and checks for occurances of <patched>
can use policies from directory, see setting policies
runnable with local docker daemon

⁠Example

Woodpecker:

steps:
  kyverno:
    depends_on: []
    image: kokuwaio/kyverno:v1.19.1
    settings:
      manifests: kustomize
      policy: policies

Gitlab: (using script is needed because of https://gitlab.com/gitlab-org/gitlab/-/issues/19717⁠)

kyverno:
  needs: []
  stage: lint
  image:
    name: kokuwaio/kyverno:v1.19.1
    entrypoint: [""]
  script: [/usr/local/bin/entrypoint.sh]
  variables:
    PLUGIN_MANIFESTS: kustomize
    PLUGIN_POLICY: policies

CLI:

docker run --rm --volume=$(pwd):$(pwd):rw --workdir=$(pwd) kokuwaio/kyverno:v1.19.1

⁠Settings

Settings Name	Environment	Default	Description
`manifests`	PLUGIN_MANIFESTS	`$PWD`	Directory to search for Kubernetes manifests.
`policy`	PLUGIN_POLICY	`none`	Directory/Git to search for policies to use.
`exceptions`	PLUGIN_EXCEPTIONS	`none`	Policy exceptionsto apply.
`warn-no-pass`	PLUGIN_WARN_NO_PASS	`true`	Warn if no resources where checked.
`table`	PLUGIN_TABLE	`true`	Display violations as table.
`detailed-results`	PLUGIN_DETAILED_RESULTS	`true`	Display violations with detailed results.

⁠Alternatives

Image	Comment	amd64	arm64
kokuwaio/kyverno⁠	Woodpecker plugin
ghcr.io/kyverno/kyverno-cli⁠	not a Woodpecker plugin, official
bitnami/kyverno-cli⁠	not a Woodpecker plugin
nirmata/kyverno-cli⁠	not a Woodpecker plugin, outdated
gbaeke/kyverno-cli⁠	not a Woodpecker plugin, outdated

Tag summary

Recent tags

Content type

Image

Digest

sha256:0042d783e…

Size

68.6 MB

Last updated

3 days ago

docker pull kokuwaio/kyverno